AWS mwaa documentation change

Service: mwaa · 2026-05-28 · Documentation low

File: mwaa/latest/userguide/tutorials-private-network-bastion.md

Summary

Added note clarifying that bastion host isn't needed for new 'Both public and private' access mode

Security assessment

The change updates security guidance by clarifying when bastion hosts are unnecessary due to the new network access mode. It improves security documentation but doesn't fix a vulnerability.

Diff

diff --git a/mwaa/latest/userguide/tutorials-private-network-bastion.md b/mwaa/latest/userguide/tutorials-private-network-bastion.md
index 2e09ee973..7560d9312 100644
--- a//mwaa/latest/userguide/tutorials-private-network-bastion.md
+++ b//mwaa/latest/userguide/tutorials-private-network-bastion.md
@@ -12,0 +13,4 @@ This tutorial walks you through the steps to create an SSH tunnel from your comp
+###### Note
+
+This tutorial applies to the **Private network** access mode. If you chose **Both public and private network access** , you do not need a bastion host to access the Apache Airflow UI since it is accessible over the internet.
+
@@ -44 +48 @@ This tutorial assumes you've chosen the **Private network** access mode for your
-![This image displays the architecture for an Amazon MWAA environment with a private webserver.](/images/mwaa/latest/userguide/images/mwaa-private-web-server.png)
+![This image displays the architecture for an Amazon MWAA environment with Private network access.](/images/mwaa/latest/userguide/images/mwaa-private-web-server.png)
@@ -48 +52 @@ The private network access mode limits access to the Apache Airflow UI to users
-When you create an environment with private webserver access, you must package all of your dependencies in a Python wheel archive (`.whl`), then reference the `.whl` in your `requirements.txt`. For instructions on packaging and installing your dependencies using wheel, refer to [Managing dependencies using Python wheel](./best-practices-dependencies.html#best-practices-dependencies-python-wheels).
+When you create an environment with **Private network** access, you must package all of your dependencies in a Python wheel archive (`.whl`), then reference the `.whl` in your `requirements.txt`. For instructions on packaging and installing your dependencies using wheel, refer to [Managing dependencies using Python wheel](./best-practices-dependencies.html#best-practices-dependencies-python-wheels).
@@ -52 +56 @@ The following image depicts where to find the **Private network** option on the
-![This image depicts where to find the Private network option on the Amazon MWAA console.](/images/mwaa/latest/userguide/images/mwaa-console-private-network.png)
+![This image depicts where to find the Private network option on the Amazon MWAA console.](/images/mwaa/latest/userguide/images/mwaa-console-private-network-2026.png)